Hi there,
I'm new to QuickFIX/J, just starting to feel at ease handling some
simple custom messages. I'm implementing a client side application and
need to connect to our partner using SSL. Of course, I'd like to use
JSSE rather than running stunnel, since this is supposed to work fine
since release 1.1.0.
My question: How can I use the custom trust store that was provided by
my trading partner?
Usually, with JSSE, it's just a matter of defining two system properties:
- javax.net.ssl.trustStore
- javax.net.ssl.trustStorePassword
Unfortunately, this doesn't seem to work. The handshake fails because
the server's certificate is not trusted. The root certificate being in
the trust store, it really looks like my trust store is ignored. Niether
the documentation nor the source code show any way of setting up a trust
store in the QuickFIX config file.
I see in the QFJ source code that there is a SimpleTrustManagerFactory.
I don't really get if that trust manager factory does anything. Half of
the methods are empty placeholders. Why isn't it just a default
TrustManagerFactory.getInstance("SunX509") ?
Trying to fix the source code on my own, I then stumbled on a build
problem. Downloading the source zip file and building the whole
"release.timestamped" target, it fails on LogUtilsTest:
quickfixj\build.xml:25: The following error occurred while executing
this line:
quickfixj\build.xml:9: The following error occurred while executing this
line:
quickfixj\core\build.xml:103: The following error occurred while
executing this line:
quickfixj\core\build.xml:175: Test quickfix.LogUtilTest failed
Any suggestion on how to use a custom trust store is welcome! Or any
hint on how to find out what actually failed in the test!
Thanks a lot for any help! Looking forward to contribute where I can.
Best regards,
--
*Christian Zapf
Realtime Forex SA
*
48, route des Acacias | 1227 Geneva | Switzerland
Tel: +41 22 827 44 53 | Fax: +41 22 827 44 40
<http://www.realtimeforex.com/> <http://www.realtimeforex.com/>
|